Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.
Regulatory clocksHIPAA✓ HHS notifiedFull clock table in Litigation Timeline
HHS OCRState AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedlow sensitivity
Affected (total reported)
1,506
Data types
2
Identity (basic) · PII
Jurisdictions
1
CA
Linked filings
2
HHS OCR · State AG
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
Breach window
Oct 15, 2024
When the intrusion reportedly occurred, per the linked filings
279 days
🐻California State AGFirst filinglinked via same-victim cross-source · 100%
Boutin Jones, a legal services provider, reported unauthorized access to its network on October 15, 2024. The investigation concluded on July 10, 2025, confirming that full names and other personal information were removed from the network. The company engaged outside cybersecurity professionals and is offering complimentary credit monitoring to affected individuals.
🐻CALIFORNIAHHS OCRMost recentlinked via same-victim cross-source · 100%
Boutin Jones reported to HHS on 2025-07-21 a Hacking/IT Incident affecting 1506 individuals. Breached information located on Network Server.
Affected (this filing): 1,506
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.